Guest Logon - Single Printer Only - No Interactive Logon For Computers

I would like to have guest account that only allows access to a specific network printer, and nothing else. I do not want this account to be able to log onto any compturs interactively. I pretty much want it to be denied to every other resource out there. Is this possible?

even better on the win 2k server create and account for the computer and just give him print only permissions and deny log-on locally.. ...wait are the bringing in their laptops ??
and you have no control of the os ??

is it a network printer ie it has an ip address if so the so thing will work just put it in the dmz..
other than that..
you would need to setup a server with 2 nic in it and dhcp...

i nic connected to your network and the other nic to the network for the customers..
setup dhcp on that interface so that the customer can get an address and the server just set it up as a stand alone print server... remove all gatways on it so the it wont rout from 1 network to the next...

What i'm looking for here is for the customer/sales employee to be able to type : \\domain-controller, right click on the printer and click connect. Is this possible to do without giving them access to any other resource?

Yes you can do that. Just enable your guest account, put in a password, go to the print server properties, go to the printer specific properties and allow the guest account to print only on that printer through the security settings.

Netbios to the print server and click connect. You will then be mapped to the printer. Of course to do this you must have a computer account in the domain and login to the domain with the guest account. You will not be able to login locally to the station and do this.

yes, but the guest account is a part of the everyone group which has access to shares with security set to everyone. although those type of shares have low security risks, I do not want customers to have access to them. therefore, I need an account that is capable of listing printers attached to the domain, connect to them and that's about it. maybe this is not possible?

Customers can only see them if they are shared, it is the folder permissions not the share permissions that decides whether you can access them or not. On a default win2k networks guests can't access any resources... it is you who decides that, anyway you look at it, if the computer has an account in the domain you are at risk, regardless of what username they use. If you are that scared, and i would too, do not have them log-into the domain. Have them login locally and use LPR or RAW to connect directly to a printer, these items will be saved with the profile and they will no have access to your domain....

Downtime reduced, data recovered by utilizing an Experts Exchange Business Account
Challenge
The United States Marine Corps employs more than 200,000 active-duty Marines with operations in four continents, all requiring complex networking system…

The Need
In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication. By default, if the time difference between systems is off by more …

This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg).
If you're looking for how to monitor bandwidth using netflow or packet s…

You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes.
Assigning simple products to configurable: We assigned simple products…